program: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x80000000000, 0x8005, 0x0, 0x0, 0x11, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x4}}}, 0x118) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000a00)={0x6, 0x118, 0xfa00, {{0x9f1c, 0xfffffff7, "71e4ded33022aaacf08ab2c4519121c3baaf1bfc2a6917794cb8880d26c8696b6b81596c2af702f0196d9d78165cde9aae2f10251360795165f4b52dbbc06e7e01f1fce9d5741995b37c1abfcc769baa650100f3e15936cbbc476ea7980f124766549e6bb9e55a316896c0c9b6ffcb8357de5b72644c6e853288d0bf9483dab3a4236d5527c0b8b5f12a13d0604a388bb84b6864dabd8738c4d48fc529e868df179383f07c00a687d0ae87ff1dc065aa55c9d6cf834aeeef6d40f7e52e1cf6b793f70d8476b36f997cddfbbd22431fd67c2d52ee3220d6b05a4b22aecfef48508dd158d314f77eac58483543727bad2abab8bcc2a2877d622b591776bb715464", 0x0, 0x5, 0x37, 0x6, 0x1, 0x2, 0x5c, 0x1}, r3}}, 0x120) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e21, 0x3, @local, 0x2fdeeb6e}, r3}}, 0x38) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x8, 0x3e7a, {"2ca432d65f45d68b8a936959855d2637"}, 0x6, 0x4, 0x7}}}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x7e}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) syz_mount_image$bcachefs(&(0x7f0000004900), &(0x7f0000000140)='./file0\x00', 0x200041, &(0x7f0000000040)=ANY=[@ANYBLOB="f12af8256340cd4f4545902d7a38213e74702f8f610547c8dbb4b1f17f180e735759e49c980e3171ac035a873be0f8300150a1a92a10ae1b2122cbe35edc56c37db99572d3e0367d261e2eaeb1598c734b3ee6106eab8bef8adf2c85203834153c9ff06a4f0d70f32f1646efa83933615241995ed28a03507368b23a89196484a25f32a2180af733622ef25915f0694cfff7dc1a15bd5e266e01ee3fceafaa5084f5902519c8805fcc439819468b0398b73f725a7c975144690790ff6fe66fd7617409e3854bc06f60ca955a1ad40b9de3f41b6153d8286c928190d175d5"], 0x0, 0x4991, &(0x7f0000009340)="$eJzs3QuYHGWhJ/y3unsmc0knkxhCAI1DoiByS7iJJHgmEO4KMaKHjWQDZhK5RIIhiIJ6Ah4VYSN86OFRWZeV8Mhy9uMD5Bx1zQOKAoIeBcSDlxWEPaK7G7l4ELkYmO+Zma5Jd03XdE9PFRj5/ZSpVPVb//ft6pquet/pqg4AAAC8Ktz1yXP+tPrHl1//izNOuXfDoc8+GbqLQ8s7Ko93xP84+BVrIi+jcqlcCnX2i86FF/xm9luPmbvh0fs/2731t5/81kXfObDv748/7Maznzz0mwee+aFGufFutOO2+egnUQhrn5xx1U0b3z1rcFkUQihGhQ0hTLuwcPu0KBHR+0IIob9SrlyaPfTzkduHH7zoW584bXC64dJJNStNTYTY31/dZoQQukMIl1fmL7r5+wv/+6zj9rrx+W+c9PWN118WCnHJ3jCpar8KfVNOybIdO1b9e+vfhTC4F86q7IfRBNq1JITQVTXfaDdudjffuzItJOYPSpTbITFfSMzvXJkuqkxnVKazKtPJlWnylz/O2TUxTf5+Z+XMF5srF7ezmFG9Oybm2xqU3+Wy8eUnt2vS7Mp076h+exrlRZXXcPC/8viaNi6D27szhHBhZT5+2x7cH6YMPlbqTawxObw9vCMcHxaHI8KR4ahwdDg2HBOOC0tC16iy5ZSy06IlYfKo0lHoiYqVNhWjUIhCaWSzLI5CaK8qO3VknULNazu4f0+q8zzj5VElcUNl2l3Z1t3R9FHrDNQRP/b5tc/1XXZz1/dn1d2qIUTHR5X8qKX8ozove7z3krcs70nLnx3nF1rK77z954s+fX64NTX/6Di/2FL+o7vdNvVdOw/8MDX/xDi/FLWSv8+XXtz9+J/scUhqfn+c39FS+2+/acuizQdv3iU1f2Gc39lS/iXXn3jC4z+9cn5q/kFxfldL+Q/O/Oc/3/KBR37QkZZ/Wpzf3VL+rUdMX3Lx/X/YnLr/7xXnT24pf8VTG+9Y2nbokanbZ2acX24p/+Frntuy6czOC1Lz18T5U1rK/+o+1937hlk3bErdPnPi/Kkt5W+65M7DP/b0tx9Ibf+sofyoO/S0lL98/veuPfnNW85L3X+Wxe2f0VL+ndO27rT0pf49Utu/rtERFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABevcqlcmlwetcnz/nT6h9ffv0vzjjl3g2HPvtk58ILfjP7rcfM3fDo/Z/t3vrbT37rou8c2Pf3xx9249lPHvrNA8/8UKPcjo7h6Y7xfAjRT6IQ1j4546qbNr571uCyKIRQjAobQph2YeH2aVEioveFEEJ/pVy5NHvo5yO3Dz940bc+cdrgdMOlk2pWmpoIST6v0F2M21PTznDwuDYb24kZIYTuEMLllfmLbv7+wv8+67i9bnz+Gyd9feP1l4VCXLI3TKrar0LflFOybMeOVf/e+nchDO6Fsyr7YTSBdi0JIXRVzR8cJo3ZjmZ3870r00Ji/qBEuR0S84XE/M6V6aLKdEZlOqsynVyZJn/545xdE9Pk73dWznwx7ZHnaubidhYzqnfHxHxbRrmx5HZNml2Z7h3Vb0+jvKjyGg7+V261kU0Y3N6dIYQLK/Px2/bg/jBl8LFSb2KNyeHt4R3h+LA4HBGODEeFo8Ox4ZhwXFgSukaVLdcvu//PBnNGlY5CT1SstKkYhUIUSiObZXEUQntV2akj6xRqXtvB/bveb2q8PA7cUPlHd2VZdzR91DoDdcSPfX7tc32X3dz1/Vn1Nupg5vFRJT9qKf+ozsse773kLct70vJnx/mFlvI7b//5ok+fH25NzT86zi+2lP/obrdNfdfOAz9MzT8xzi9FreTv86UXdz/+J3sckprfH+d3tNT+22/asmjzwZt3Sc1fGOd3tpR/yfUnnvD4T6+cn5p/UJzf1VL+gzP/+c+3fOCRH3Sk5Z8W53e3lH/rEdOXXHz/Hzan7v97xfmTW8pf8dTGO5a2HXpk6vaZGeeXW8p/+Jrntmw6s/OC1Pw1cf6UlvK/us91975h1g2bUrfPnDh/akv5my658/CPPf3tB1LbP2soP+oOPS3lL5//vWtPfvOW81L3n2Vx+2e0lH/ntK07LX2pf4/U9q9rdIQFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL9cC9bsdNSvJ+8yqbMyXy4NT28vDE/bKssHFw+WWbHifStP22/FynWrTl2/qk5eW4hC1+A0Gv3YwMDAQHtP7bLpYbjg9Oh1TZWP29n13TUrN5xx15UhzNvhgdkdqc/vxlsXHzavzs+EqG9g8wF7nn314ivmDy+YVnke01LaFRLtiluw9wlbe/7hnrMeDGHezAdml1Lbte8XNx1S26LhJcNbukphW3vCSHuKDdvTmXN72kJhzNd5ZGtW2jWpsuKkqKup8vHr3rH69DWr9guhPcwYXh7NGdonO1OfybC4WfF++77161atWnHu2f2nrl+14qy1/avOWXHeutPXr191Vvx8SqnPZ9ANiflyZbuUo13qlp+cmI/bO3foZzH0JtoZUuqNtYXucbVvsPzQNNqpZnlhjPJddcrvUKnvO1Fz+dNTyneHnqGn2B1NH9X2gTrix5bP/961J795y3lpv+HRsuGKOkN5eBq9tn7BDe+pme2Jhn+HelPqr97f1iX2t0IxGvUqxK9n9XofSayXfC+rXq+jsl5HNCdsSKxXTPy+h6rdpTexvDrnM6NyRktu71ji/X7N6WedWWft8b9P5v2+VPs++cq3Z3pl+/ylHd9eueNuIdGuY2/e+OUtX1h6xPCCRseVkdJNHleS5WuOK/tnd14zaZznNcny8fY98cOf+3X/1+bsmd3rft8zq++8Yskd04YX+H2d2HnNyNaM96PKih0p+1+y/KTq/W+flWvX9A/PVx83eqMWzm8G997BM5pVK04fPL1Jlm/0PlRKOZ+9Zn7b1m/89v0fH9wfn35918jy3RMZTe6PnX0Dn1oxsMfzvzrsg9vaFcbRrs6XqV11t2v/qg+v6F+1+tRz16yPVxw8Fx1rf4nb1TbyflWZRtNqynaklD/nI+efeeqaNavWnbNte431OralvI7f7L127R7veeD32b2v7LTxl3evubt/v23tCuNoV2dKu+KWJX+bWm1X1q9j/Psbn8VOb/A6Thr1Oub3j9DE/vFKHXeyOh7GLevPqF3dlffS8fZLPr/2ub7Lbu76fmq/5Piokh+1lP+J5Vc/dHf/pYXU/MPi/EJL+Z23/3zRp88Pt6bmHx3nF1vKf3S326a+a+eBH6bmnxjnl6JW8r+weskTv/vimX+o06Uazn9tnN/RUvtvv2nLos0Hb94ltf0L4/zOlvIvuf7EEx7/6ZXzU/MPivO7W8q/9YjpSy6+/w+bU/P3ivMnt5S/4qmNdyxtO/TI1PyZcX65pfwjV0xZeNwVy/dJfX13i/OntJT/1X2uu/cNs27YlNr+OXH+1JbyN11y5+Efe/rbD6TmzxrKj7rDjJby33ndS6F814/OTd0+lYGYqDIWddG3PnHa8HxhZEw3VE57J9VZP17e7PgUAAAAAAAAAAAAAC+P+Pr/+HqL+Pr/eyofEo0/h9/sdRQA26ua+0XEF8wPvtudt3Zd9RXwE/3c/qyU+uPP7dfet+KstXFTRrdjYtdXpLZjt/rt6F9Vefcf1Y6JXaeSeh3DXol2DB5/hhtz5qqPrFh56srTVq04Y+256846dc2K1WvOLVfu41G+sP59OS5JzMdXo6fdl6PRZQ+N7gOSrC/Wm8hutr7mX4+JXReT+nrMGe9+MbHr01LbUbk+bWDq8HzjdkzsOrzUdhw23u0xseuJUttRuZ6o+XZM7Lq41HYsHO/2mNj1c6ntOGi87ZjYdY6p7ThxvO2Y2PWoqe04vl47xnE/pMSFbP9vIr/R+2CyfNzfSHvf3dDwfkhj36/p/xtn+5LlJ9q+RsehyxPz7Y3qG7u69OdXqF9f/Px2Hapj290mmq2v0f2okq932v2iojHKD+Vf2Pz9q8I4749VLz/t/lVp7Z+WWn7ymNsn+Xq0Ve4YlsxPK//GMGUo/40Xzq5fwV+s6BW5lHRwew1No+1ze73c26w7lIaqrHccGnRPSoNOOu/6/zrttIs/3FNp89LE49FJUcP8sY5zCy94+HdbNi0+Ic5PtiM6eXhBW+V+cGm/fyEcXTNXff+d/xzV3n+k3v3eHqm0q3q9TYn12uvcliher+H96kLt/epKVferC3Wed3U7/qmJ9te7X93mJtofr9e4/X+b2v56r291O/6lxfY/MI72V98n75eJ9Yp17r6UthtV5/zbqJzRd9yLn+8jif26Ouf3TeQ0c/+/Z0bljJb8/aqX81JG7ZlUaL09zZ8/T6yflzoekuznZXQ/oWJ8X7rKfHvUXlM2eT+huHz0vsr9dBrc76eYcj+o9VM+OvO2Y095NqP7/XT2Ddx2w31PXHragpVhpF1hHO3qSmlX3LKdS9m0q1G/4ebEfKN+Q7J8bb+hNNL+5vs1Y59XJ+trdJ/XeuXrnfemn8fWz5+SUr7xfVhPSiwY3r5p+3n1+/tTifePQmn0cSFev3q9ZxPrtdV5g+kYmVa97yXW60jutFWva0di2lZZM+18vup16R185tX1lovJ98nRB7JkvbPqtH/mqJzRGr7fTvB9Lm5Xe4P3uVkp5S9s8n3ulbpf6Xjvo9qV0q74eb9pbjbtGhl/eJnet5p8n5ySVt94x1cavs/819HvM71j7GfV7xcbi43fZ0bWr1rv88XG7zP1fk+vSqzXUedG0VFi/Xi67X2m7lYY833mH5t4n0m2+39X3i+yuq/6TYn5RvtRsnze44hfG2f7kuXzHkf8bGK+rVF9Y1fX8Pkl65voOGKj55f1uPF4x6ljqc9vgudzyf250ThpvfL17ts/1vlfGOf5Zb3zxbTzv7T2l1scJx29f489Tlqv/PjGqcfOT5bf3sdhqzdLvfPDrG3f47DpY9cv5DRG2+o47P4XX/em/3b1hktTx2FP2TYO28p4yT5fenH343+yxyGp97fsb3Yctnacs/p86o2l1sZh9yo1Pw7buH1HpbbvrS22r28c7Ws8zlp7njueceJ3NtH+euOsJzXR/ubHif9DbfsLzY8Tn95i+88eR/urz5fPK2UzTrxhVE5r48Sfyag9V2TUnquayGlmnPjaUTmjNTNufUM27SmECbQn//srT+R7lVLCq75XKcro/sGNzpMBAAAAyEd8/X93Zb5cGh4LOzwxJlrzeaD+tSv6Tz9n5anr+s9ZsfrUc9ZXfQiz0edOsv77aqt/z027/rL5v+c2fx1LGOd1Mvl+z/vkuu1Pb8/kcbW/evy1rXI9W6zeuGkz49NTRuWMHudu+Dm2CX5O5Z8S8432u2T5uP2tf05l7P0iWV+jzxHUK1/v7/zpf7evn9+dUn4wvZVx6gdn/vOfb/nAIz9IHQc/bbiixn9nWlYz1zXO7/+v3v/G8/3/1eu1j/6K6NTv/6/d31v//v9Gv395/958PTHf6PcmWX6ivzeNPl/0ucR83p+fStYXP7+8rsNMbs9G7wv1ytd7X0j7PU/L72zx8z+jX5+xP5+TLL99fz5n7Gsl8/iT2l/B53NSN0s+n89p7f4rD1/z3JZNZ3ZekHpcW9Pk52c2HFMzW338+dcmjlv1Pp/yq+Rxqzy62uY/n/LemrnyOI67j7d43P1jE+2vd9z9cxPnmc2cr5aixsfv+PmO9XmKchM5zZwHzByVM1re5wH/IzHf6DiZLJ/3ecBnEvN5nwck68v7PCC5PRv1G+uVr3cekH5cr5/f3uJ5wOjXZ+zzgGT5v4LzgJf1uLbdngdEr9R5QGv3g7tz2tadlr7Uv0fqecC6Zs8DFtfMVh8PH4yaOQ9oH3X8fSixXvuM0dU2fR6w4eSa2RnjOA94oon21zsPeKaJ9tc7D9g66njZ2nlAWyGb84ApTeQ0cx6w46ic0fI+D7gsMd/oOJksn/d5wFcS8x0N6mv0ZtLo+SXra3Qe0Ki+tON0vNro+w6NPT5d7z5FY72+yefT6DidLL/dHqdfoePOX91xOqr7z8y0en+Qozove7z3krcsTz1Oz272OL2kZrb6ePWzQmv99YcT67XXqbv543Tt9S7ROI7TTzbR/nrH6T810f56x+kXRx3PWjtOtxezOU5PbSKnmeP0rFE5o6Udp/O+f2Te93PN+z6ceV/vlvd9VfO+X2re93HO/3qYfO97nPf9eyd2Pc+W86q2z4U1+a7nAQAAeFWLP/8/uTIff/7/e4lyed9/OR5fTe0fz47738a3hrQn8o1v1R/fqgwJbxvfyvdz6Nv/+Fm+n2c0PpeSvyxuf76fIzH+BwDw6hb3/+NLZOLv/38+nq9Mm+//T+z8NfX8u3L+2nw7JtaPSW3HmvG2oxR1DU4vbPL+zQe8a68NXx4YGM/9m8ME7g89q0H+y/W9tanfu1X3e2vz+97r1HaM+3uvJ9ZPT93/Zo63HRMbj0jdHiPjEXmP920n43HJfONxTX7eLO/xuO17PMh4DQCQtbj/H38xY+Lv/yMX1IynvzuR893U863+bP7+36ifqT+Tkn+i/sbL8ff/xv3tfMcV8h43y3t8Znvv7+U9fqo/CQDw6hb3/6dW5uO//3+7Mj81UV7/OyV/O/l7YuPxFf37uvn69/r3Y+Tr3wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/KbYueGz56lXLbikVQ4hSygzUET9WbO/r622h3nde91Io3/Wjc6uXlUstBAEAAAANxf3wwsiSjlAuvSF0RHPCVe0hVHfJi3XW708ZNGiP5oTriyEUqpfV6d/HYweD9V0xqr7R4VdVpke/Zng6q2r9mxL1Feu0OErUW93eaxLrF4rRqAa0MtYBAAAAr7S4/985sqQnlEsbhvrDvVEInQ3W74in0ZzwmVBbvt54we5jjBfcU9iWN7SsTrneqvJPhUT5OtnV5f82SpQvjF1+11KifJ0nVF3+wSiEturydcY7Tqkq/5lk+zvGzp+TLF/nxakuv1Nb7TZs7x67/OHFRPsnj13+tlKifHns8ouT5aeMXf6AEMKk6vJTxy7/kcT+194zdvk/FhLtmZFefnD/vqBUuz3rjU/dHpevDExVj0/NaU+uP3oHHHl9E9GD628Y9fs1eoccecqJ6MHnuy6xfr3xrTpNAgAAAAAAAAAAAAAAAAAAAAAAAAAAAACaFH///+To5f3+/xVPbbxjaduhR1Yv8/3/AAAAkI+4H77tq+E6Qrk0NRTDTkNzn0mUj5d/NmX55SnLP5ey/CsZPAcAAAAAAAAAAAAAAPhrF1//P/Vlvv5/0yV3Hv6xp7/9QPUy1/8DAABAPuJ++KSRJR2hXCqFUnj90FxyTCCqjAe8zM0EAAAAAAAAAAAAAIBXtfj6/1IUQmGMcktTlkftoaOVeu+fes3ev9l7443Vy8qlLYXOsMtwbmXZ3MpcfI+BKDFNU8mJMsopZJRTzCinlFFOW0Y57RnlTMoopyOjnM6McroyyunOKGdyRjnljHKmZJQzNaOcnoxypmWUMz2jnNdklDMjo5wdMsqZmVHOjg1zoq21N8CpnzMro/bslFHOzhnl7JJRzmszynldRjmzM8p5fUY5vRnl7JpRzpyMcuZmlPOGjHLeWMgmZ7eMcnbPKOdNGeXskVHOmzPK2TOjnL0yytk7o5x9MsrZN6OceRnlzM8oZ7+McvbPKOeAjHIOzCjnoIxy3pJRzsEZ5bw1o5xDMspZkFHOwoxyDs0o520Z5fxNRjl9GeUsyijnsIxyDs8oZ3FGOUdklHNkRjlHZZRzdEY5x2SUc2xGOccVs8l5e0Y578go5/iMck7IKGdJRjnvzCRnSffIfKs5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB24u//j8b4/v+BOuLHiu19fb0t1HtU52WP917yluXVy8qlC8LU8Lqh+kJPbflJleneJ2zt+Yd7znowhHkzH5hdSs3f94ubDplX5+colSfdU6k3Sqn348vOeM2iqLBvCPN2KL52wvVGfQOHzn3h8C8VijvX1l9I1N9RmZ675W8OetudO/9ssP6xnveNty4+bF6dn4mnFPUNXLRo7qn9jzzUW1t/MaX+9VM+OvO2Y095drj+jonUP6izb+C2G+574tLTFqwcXjC5Un8ppf5r5rdt/cZv3//xDWFe6enXd427/vj5taXkf7P32rV7vOeB32f0/KK+gZ02/vLuNXf37ze8IK6/PVF/Z2Xa9d01KzeccdeV2dW/+YA9z7568RXza+uflFL/iR/+3K/7vzZnz+zqv++Z1XdeseSOaalRAADAyyzuh2/rUXWEcmlFaj887i+Mrx9e3VOI+8OJdRL98GQ/NG5fsh8a91R2TsS12g/tSemHxs877ocO1j/YD43r3z20Wv+nVgzs8fyvDvtgbf3Jfmpcf7Kf2pHYPuOsv+l+apyf7KfOqix/09xm6y8k6j/25o1f3vKFpUfU1t9sPzV+/v0tP3/9VAAAAAAAAAAAAABg+xBf/1+KQiiGEKIQwtJEmTyu/79q5TPf2P2Z/c+rXlYu/edid9hl6N/vSpQvVqbDHzOPQlxnlJimiXNPzCn33Tnlvien3L/NKfeknHL/Q065y3LKfW9OuSfnlLs8p9z/mFPuipxyT8kp99Scct+XU+7KnHKT1+lklbsqp9zVOeW+P6fc03LKPT2n3DNyyj0zp9w1OeV+IKfcs3LKXZtT7tk55X4wp9x1OeWek1heyih3fU655+aU+6Gccs/LKffDE8ltS8/9SE7tPT+n3Atyyv1oTrkfyyn34znl/l1OuRsa5Ha0mHtJYnmhJrfYcnv/U2J5W4Pc5PNLy92YU+5nc8r9TmKDZbU/3J5T7ndzyv1eTrl35JR753DBD03OOPeunNr7/dG5t3V9/oQJ596dU3vvGWdus79vP8gp94c55f5LTrk/yin3xznl3ptT7n055d6fU+5Pcsp9IKfcn+aU+6855T6YU+7Pcsr9eU65v8gp95eJ3LaMcv9nTrm/yin3oZxyH84p99c55T6SU+6jGefCX5L47/CdI0t6Qrk0vxDv/xcmyrdXpsP7f6Hl36uLcsr9RE65f59T7idzyv1UTrmfzin34pxyP5NYntV4y6U55V6eWN6eUe7/k1N7P5dT7pWJ5Vlth6sSyzsa5DYaaIhz/0ud3L4Mcr+SU3uvzSn3upxy/zGn3BsSyzszyv1fOZ2P/ltOub/JKfexnHJ/m1Pu73LK/d855f6fnHL/b065W3LK/X0itz2j3Mdzyn0ip9wnc8p9KqfcP+SU++855T6dU+4fc8p9JqfcP+WU+2xOuc/llPt8Trkv5JT757Tcztrl483dmlN7X8wp96WccgcyzgUAAIAsxNf/T4nS/7SRx/X/X93nunvfMOuGTdXLyulfIwgAAABMQNwPbx9Z0hHKpblhbpj9irarsajhNcAAAADAsLj/3z2ypGf76P9HURj+X2IYIKr7TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyFX8/f/ll/n7/49cMWXhcVcs36d6me//BwAAgHzE/fDCyJKOUC5NCpPCayvzR9SUL0XFoWlvg3EBAAAA4C9H3P/vHFnSE8qlc7b1/zcsrik/o0H/vzhSsnbcYFte7fLJDfK2jUMcWbPe1GbX21C7XvX4xaClie2xrb6jatcrNNvOo1PrG7udtetNaXq9Y2rWKze9PY+rWa+76freUbNeZ9P1nVCzXkfT9S2pWS9qur7aV7bQdH3vCrUVNlvfu2tWKzZd33tq1usxvgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3buuCx5atXLbulOwohSikzUEf8WLG9r6+3hXpvPWL6kovv/8Pm6mXlUgtBAAAAQENxP7xzZElHKJcWhrZop5py8djApYn108pd3mS5zzUoV6hMr2xQLh46uKrJvP/SZLmvNFnu2ibLXddkuX9sstwNDcpNr2zo76QN7gAAAPCqEPf/u0eW9IRyaddQrMw16sc32w+Nu583NVnun5os9/Um2/c/GpRr108GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALZzWxc8tnz1qmW3dEYhRCllBuqIHyu29/X1tlDvJdefeMLjP71yfvWycqmFIAAAAKChuB8+aWRJRyiXukJXmDk0V93XH1RIrB+F9HEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjK1gWPLV+9atktHVEIUUqZgTrix4rtfX29LdR7+01bFm0+ePMu1cvKpRaCAAAAgIbifvikkSUdoVzqCB1hh6G5emMCQ/3/npexkQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC86m1d8Njy1auW3RJFIUQpZQbqiB8rtvf19bZQ7yeWX/3Q3f2XFqqXlUstBAEAAAANxf3wzpElHaFcuiBMDa8b6veHntrykyrTvU/Y2vMP95z1YAjzZj4wO73jvu8XNx0yr87PUSojAT2VeqOUej++7IzXLIoK+4Ywb4fiaydcb9Q3cOjcFw7/UqG4c239hUT9HZXpuVv+5qC33bnzzwbrH+t533jr4sPm1fk5uv6LFs09tf+Rh3pr6y+m1L9+ykdn3nbsKc8O198x0fo7+wZuu+G+Jy49bcHK4QWTK/WXUuq/Zn7b1m/89v0f3xDmlZ5+fde464+fX1tK/jd7r127x3se+H1Gzy/qG9hp4y/vXnN3/37DC+L62xP1x/t/13fXrNxwxl1XZlf/5gP2PPvqxVfMr61/Ukr9J374c7/u/9qcPbOr/75nVt95xZI7pqVGAQAArxJx/39bT6MnlEs9r3g/GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZj64LHlq9eteyWQhRClFJmoI74sWJ7X19vC/V23v7zRZ8+P9xavaxcaiEIAAAAaCjuh3eOLOkI5dKbQ3voGur33/fM6juvWHLHtNAz/OikyrRj9elrVu2zcu2a/uH5uPyhc184/EuF4s5x+agyLa1Ze876PVevPfes4RXaKuUvWjT31P5HHuqNyxfi8oP587aV23zAnmdfvfiK+XG59up27Let3E4bf3n3mrv794vLtVWXm7+t3LE3b/zyli8sPaJu3v7byt12w31PXHragpVxu4rV5ara96kVA3s8/6vDPjjS/sq0q1IvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOzdcFjy1evWnZLiMLg/+saqCN+rNje19fbQr2fX/tc32U3d32/elm51EIQAAAA0FDcD+8cWdIRyqW5oSuaVlOuozIO0FGZL/UMT/dd/4Gz9z3nI+fvffoHTn3/qvevOmv//Q7c78C3HPjWAw/Yd/Xpa1bNG/4ZJjXIa6vknfOR8888dc2aVevOGZ6f3mC9SaPWy+8fGW1yAAAAeNnF/f+ukSU9df8On+x3Fyv97uh9w58aaI/aa8rPqpSfVZlvr5S/8H1pnzIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1m1d8Njy1auW3VKMQohSygzUET9WbO/r622h3kd3u23qu3Ye+GH1snKphSAAAACgobgf3jGypCOUS12hLXQP9fsv3frB6N/3fe/ctp7Kw+3t4cOnrl+/bv7wz7jcUYWF+z76pf+026hy+w3/fEWeHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/NbYueGz56lXLbgnFEKKUMgN1xI8V2/v6eluod/n871178pu3nFe9rFxqIQgAAAAAAAAAAAAAAAAAAAD+CsTX/5eiEEph+B4A9yRuBJDH9f8LL3j4d1s2LT6helm5tLTQHXYZ+vcPEm2Ibw0wd+hnFOI642IbGtQX5/4wp9x/ySn3Rznl/jin3Htzyr0vp9z7c8r9SU65D+SU+9Occv81p9wHc8r9WU65P88p9xc55f4ykduWUe7/zCn3VznlPpRT7sM55f46p9xHcsp9NKfc/5VT7r/llPubnHIfyyn3tznl/i6f3IEop/b+n5xy/29OuVsyyb1jVO6Jidz2jNr7eE65T+SU+2ROuU/llPuHnHL/Pafcp3PK/WNOuc/klPunnHKfzSn3uZxyn88p94Wccv+cU+7WnHJfzCn3pZxyBzLOBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiFV//39b5XvRltYpd09Uf/2oPfR0VM3XW7ee/S++7k3/7eoNl1YvK5e2FDqHvsctCsXKsrTvbUtpzojhnEJGOcWMckoZ5bRllNOeUc6kjHI6MsrpzCinK6Oc7oxyJmeUU84oZ0pGOVMzyunJKGdaRjnTM8p5TUY5M2pzCq3m7JBRe2ZmlLNjRjmzMsrZKaOcnTPK2SWjnNdmlPO6jHJmZ5Tz+oxyejPK2TWUMsmZk1HO3Ixy3pBRzhszytkto5zdM8p5U0Y5e2SU8+aMcvbMKGevjHL2zihnn1E5HS3l7Jv4nurCuL+nejhnXkY58zPK2S+jnP0zyjkgo5wDM8o5KKOctwz13bflFFvMOXhkvjex745vf35rRu05JEyqyolazlmQUXsWZpTztsTr3mrO32TUnkUZ5SzO6HkdM/I+mpbTaEccznl7RjknZJSzNKOcd2eUc1JGOctCV4OcDU3lvDd0ZtKekzNqz1lRNucJazPKOTujnA9mlLMuo5xzMspZn1HOuSM5pQnlfCij9pzXMKfR+yoAQCz+O3z3yJKeUC6dOzKuEC/fdehco3Ok1Hj7zV2Z5Bw60p6Jnde/LaP2LMpo+5zQMKfZflgsbfymue3zHzPqP61I5JRazDklo/a8L6P9pz+jnPdPOAcAAOD/Z+9+XqUq3wCAv2fmzDhXHb1fkS9Xi7q0UTFbBpWLi1pZmorSL7MwyDZqRNGihLito39AEkJp06aFRLughQvbFeFSWhQFLtsE2T1xZs65M++ZM85BKkE/n4Xn3Pc8z/u877nHC88s5gAAAAD3rnff/+D062fOnHrHiRMnTlZP7vRfJgAAAAAAAAAAAAAAAAAAoHz//+Zk+lfMZzXKa+3u0tLibdR95Pxf2w79sOPx8bF+el+YC5sG50erCbuPPbx8Icu+33hx18+7Pvlyfsq8ydbhLsp5rk7ZVPneg/niu9ar9ZKTo3lq97/n4/c+vJBlu89d//XGpX2Hy3mq9ZITvsAdAACAO6/sw/urI73QT+ca988LM/pnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBuU7/9f+x+////a/7/68/LZn74bH+untzERAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwDyvf/95MQWlNi/o33/1+/+MeNS6fnzo2P9dO3w5pw//CH5X1R/OakPTguTlnPKO/JKG9907zwVJS3sXG9OC8dy8sdrex7VO/pOK/VdJ37p9a79TrjvA2N856J8vqN7+eBKG9d43rPRXlzjesdjvJ6jesdifKSxvXi32yrcb1jIS7YtN7zUVq7cb0Xorz5GXkBAAC4a5V9+LrVkV7op4dCu/yx0oevjlf611G/EY/P6qdG8+2vr1PpP0fjR+rrhxej8cb9cXhpal7uahKm7DfOCyEd/Nsr6vXKdc9X8j6bzMtrLRR5C8Vot5oXXo6zGn9ucDzKW9v4vrwS5TXu/5dPRHmzPr8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPcfOKXV988dfxy2g6hNSUmq1FeS7tLS4shbG9a71oSQieEcOV/N7ccXXljx/i1fnomdMJD+emzWZa16/J7xXHNMO7ySpa16wK3JfX1i/l/DyG0u9WLO3c+uj+O25plWatbM9diHPfRIK7mBlbiDrTyujULrsQNdNPJuJNxXL7/Vrc3c76Dg7i5mXF72yEk3XUz487mt6S7fmbcb/kt6fZnxr01iNswM+61lSxLuhtnxl3Kn4vu/My4Bwb72Dw9rnjOPm+FkLTD5IPwbXHsLQyPC3HewXSQN/lgrP7KKlMWeV8Mn+vJB2V1S5Upi/18mue12snkQqf95wYAAO4ZZR8+avl6oZ/uLfuQPUkIde1qePDW/fX5Vgiduv51OY7L+7ROd+1kXKX/emy4jsmVbCqOS5X+psj7MQmh0w6TC0kqdSp524b1JhvmzuRSx/O25/V67cnGs6zXqxyLvCuDvJqGtcxbqByL+7clX2ddv1fejyLu63z+VjoZV+mHv8njOuMf8FTiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Ju9uguRqvzjAP47s+vfnZ0d15X962SwbC8UhgpeaBYKWr5mbYsZRCR5ISFZGAUFSbRaUhimF9FF3WUUEqESvaBYSplQkGgRdRMJ0Y2IRVBW2sboObYe97ByWgjq84Hd3zznPM93f/PMc3YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgn1Nvrbc268ebHvn5vs+27fj6/lWHB+b+crI6Z/13PTcsvWrg2JHna6e/37Rn4/6Z857uu2nnQyfnvjdz7aMjBs8+Vyalw7aI5GgSse5k98u7ttzZaF5LIqIlqQxEdG2oHOhKcgm9v0XE6nRevbXn7O8x6c2Ne55a06wDz429YFFnLiT/vqLWkvVzrrZd2C//Lt0RUYuIbel44+5Dc95oLJu689d373pny46tUclm9sbYIecq5o1bNZp9TBry+vSTEc1T2EjPYfI3+uqPiPYh45GO8aUe82lpreTGs3Lz/p8bV3LjyWmdn9butDbS2pHW/MNfObdFcUU6zmr++R4ta89c2rysz5ZR+ruTcuMxo5Sbye9rXk9apyXD9zNSXpJ+hs2fetkmL0Fzv6sRsSEdZ/+2m+dhXPNea29uRUfcGrdFXyyIhbEoFseSuCWWxrLoj/aL5tYL5nYl/dFx0ewkxictaU8tSVSSaD2/LQuSiP8Nmdt5fk3lgs+2+ZyMHeZ9ZtezwIH0RS29VksmXLRmMLV/8C/ZvRfWnZq3dXf7ocZwm9rM7EvS/GTE/MFh8hdXt57o3Xz9yvFF+T1ZfqVUfvXAV/OfeTz2FeYvyfJbSuUfu+b9zjsmD35amL8iy29NyuRPf+nMtX1Hp9xYmL86y28r1f+BXcfn75299/LC/DlZfrVU/uYdK24/8cWLMwrzZ2X57aXyv5z49u9vPfjtJ21F+Wuy/Fqp/H0LJ/Q/e+THvYXnf2qW31Eq/94ftny0fMzcRYX7MzHLr5fK/+aVU8e3r62uL8x/IMsfVyr/temvH7668eb2wv25MsvvLJW/ffPBm5/46YPPC/tvnM1PajG+VP7KGR++es91xx8rPD93Z/13l8o/2HX6suV/rJ5S2P/DI33DAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/x58BAAD//5bNfHk=") [ 72.130397][ T45] Bluetooth: hci0: command tx timeout [ 72.317128][ T5351] loop0: detected capacity change from 0 to 16384 [ 72.326578][ T5351] ======================================================= [ 72.326578][ T5351] WARNING: The mand mount option has been deprecated and [ 72.326578][ T5351] and is ignored by this kernel. Remove the mand [ 72.326578][ T5351] option from the mount to silence this warning. [ 72.326578][ T5351] ======================================================= [ 72.404719][ T5351] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,read_only [ 72.404735][ T5351] features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 72.432486][ T5351] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 72.445156][ T5351] bcachefs (loop0): recovering from clean shutdown, journal seq 15 [ 72.450392][ T5351] bcachefs (loop0): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive [ 72.450392][ T5351] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 72.468902][ T5351] bcachefs (loop0): btree node read error at btree extents level 0/0 [ 72.468917][ T5351] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c70ab18f40f86f94 written 24 min_key POS_MIN durability: 1 ptr: 0:167:0 gen 0 [ 72.468925][ T5351] loop0 node offset 16/24 bset u64s 0: empty bset [ 72.468930][ T5351] loop0 btree validate error [ 72.468936][ T5351] flagging btree extents lost data [ 72.468942][ T5351] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 72.468949][ T5351] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 72.468956][ T5351] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 72.468964][ T5351] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 72.468970][ T5351] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 72.468977][ T5351] ret fsck_errors_not_fixed [ 72.514232][ T5351] bcachefs (loop0): error reading btree root btree=extents level=0: btree_node_read_error, fixing [ 72.519417][ T5351] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0: (unpack error) [ 72.519433][ T5351] invalid variable length fields, deleting [ 72.533820][ T5351] ------------[ cut here ]------------ [ 72.536894][ T5351] UBSAN: array-index-out-of-bounds in fs/bcachefs/disk_accounting.c:238:2 [ 72.540840][ T5351] index 54 is out of range for type 'const unsigned int[9]' [ 72.544639][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 72.544659][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.544667][ T5351] Call Trace: [ 72.544677][ T5351] [ 72.544687][ T5351] dump_stack_lvl+0x189/0x250 [ 72.544817][ T5351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.544835][ T5351] ? __pfx__printk+0x10/0x10 [ 72.544859][ T5351] ubsan_epilogue+0xa/0x40 [ 72.544875][ T5351] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 72.544940][ T5351] bch2_accounting_validate+0x112f/0x1400 [ 72.544963][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.544979][ T5351] ? _raw_spin_unlock_irqrestore+0x90/0x110 [ 72.545043][ T5351] ? __pfx_bch2_accounting_validate+0x10/0x10 [ 72.545066][ T5351] ? __page_table_check_zero+0xba/0x530 [ 72.545085][ T5351] ? __free_frozen_pages+0x65e/0xd30 [ 72.545099][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.545107][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.545114][ T5351] ? __pfx_bch2_accounting_validate+0x10/0x10 [ 72.545126][ T5351] bch2_bkey_val_validate+0x205/0x3e0 [ 72.545143][ T5351] ? __pfx_bch2_bkey_val_validate+0x10/0x10 [ 72.545157][ T5351] ? __asan_memset+0x22/0x50 [ 72.545169][ T5351] ? __bch2_bkey_unpack_key+0x98b/0xe10 [ 72.545185][ T5351] bch2_btree_node_read_done+0x4051/0x5550 [ 72.545216][ T5351] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 72.545232][ T5351] ? lock_release+0x4b/0x3e0 [ 72.545256][ T5351] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 72.545270][ T5351] ? bch2_printbuf_make_room+0xdb/0x360 [ 72.545329][ T5351] ? enumerated_ref_put+0xbe/0x270 [ 72.545360][ T5351] btree_node_read_work+0x40e/0xe60 [ 72.545387][ T5351] ? __pfx_btree_node_read_work+0x10/0x10 [ 72.545405][ T5351] ? bch2_latency_acct+0x436/0x520 [ 72.545420][ T5351] ? __pfx_bch2_latency_acct+0x10/0x10 [ 72.545437][ T5351] ? bio_associate_blkg+0x6d/0x230 [ 72.545456][ T5351] bch2_btree_node_read+0x887/0x2a00 [ 72.545518][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.545536][ T5351] ? lock_release+0x4b/0x3e0 [ 72.545555][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.545571][ T5351] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 72.545591][ T5351] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 72.545615][ T5351] ? bch2_trans_unlock+0x491/0x580 [ 72.545634][ T5351] bch2_btree_root_read+0x5f0/0x760 [ 72.545653][ T5351] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 72.545675][ T5351] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 72.545692][ T5351] read_btree_roots+0x2c6/0x840 [ 72.545706][ T5351] ? __pfx_read_btree_roots+0x10/0x10 [ 72.545723][ T5351] bch2_fs_recovery+0x261f/0x3a50 [ 72.545748][ T5351] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 72.545768][ T5351] ? tick_nohz_tick_stopped+0x86/0xb0 [ 72.545784][ T5351] ? __irq_work_queue_local+0x1de/0x550 [ 72.545804][ T5351] ? __pfx___irq_work_queue_local+0x10/0x10 [ 72.545824][ T5351] ? __mutex_trylock_common+0x153/0x260 [ 72.545838][ T5351] ? __pfx___mutex_trylock_common+0x10/0x10 [ 72.545854][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.545866][ T5351] ? trace_contention_end+0x39/0x120 [ 72.545881][ T5351] ? bch2_fs_start+0x5e7/0xda0 [ 72.545894][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.545906][ T5351] ? bch2_fs_start+0x5e7/0xda0 [ 72.545918][ T5351] ? lock_release+0x4b/0x3e0 [ 72.545938][ T5351] ? bch2_recalc_capacity+0x8b/0x890 [ 72.545953][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.545966][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.545979][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.545991][ T5351] ? lock_release+0x4b/0x3e0 [ 72.546006][ T5351] ? bch2_recalc_capacity+0x8b/0x890 [ 72.546021][ T5351] ? up_write+0x1c4/0x420 [ 72.546063][ T5351] bch2_fs_start+0xaaf/0xda0 [ 72.546085][ T5351] ? bch2_fs_start+0x5e7/0xda0 [ 72.546100][ T5351] ? __pfx_bch2_fs_start+0x10/0x10 [ 72.546119][ T5351] ? sget+0x267/0x620 [ 72.546135][ T5351] bch2_fs_get_tree+0xb39/0x1520 [ 72.546160][ T5351] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 72.546182][ T5351] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 72.546202][ T5351] vfs_get_tree+0x92/0x2b0 [ 72.546218][ T5351] do_new_mount+0x2a2/0x9e0 [ 72.546236][ T5351] ? __pfx_do_new_mount+0x10/0x10 [ 72.546250][ T5351] ? path_mount+0x61c/0xfe0 [ 72.546264][ T5351] ? user_path_at+0x44/0x60 [ 72.546279][ T5351] __se_sys_mount+0x317/0x410 [ 72.546296][ T5351] ? __pfx___se_sys_mount+0x10/0x10 [ 72.546313][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.546325][ T5351] ? __x64_sys_mount+0x20/0xc0 [ 72.546344][ T5351] do_syscall_64+0xfa/0x3b0 [ 72.546363][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.546376][ T5351] ? clear_bhb_loop+0x60/0xb0 [ 72.546387][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.546403][ T5351] RIP: 0033:0x7fdd1b39038a [ 72.546414][ T5351] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.546427][ T5351] RSP: 002b:00007fdd1c1f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 72.546444][ T5351] RAX: ffffffffffffffda RBX: 00007fdd1c1f5ef0 RCX: 00007fdd1b39038a [ 72.546455][ T5351] RDX: 0000200000004900 RSI: 0000200000000140 RDI: 00007fdd1c1f5eb0 [ 72.546463][ T5351] RBP: 0000200000004900 R08: 00007fdd1c1f5ef0 R09: 0000000000200041 [ 72.546472][ T5351] R10: 0000000000200041 R11: 0000000000000246 R12: 0000200000000140 [ 72.546481][ T5351] R13: 00007fdd1c1f5eb0 R14: 0000000000004991 R15: 0000200000000040 [ 72.546496][ T5351] [ 72.795241][ T5351] ---[ end trace ]--- [ 72.797646][ T5351] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 72.800926][ T5351] CPU: 0 UID: 0 PID: 5351 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 72.805145][ T5351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.809932][ T5351] Call Trace: [ 72.811395][ T5351] [ 72.812778][ T5351] dump_stack_lvl+0x99/0x250 [ 72.814919][ T5351] ? __asan_memcpy+0x40/0x70 [ 72.817106][ T5351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.819551][ T5351] ? __pfx__printk+0x10/0x10 [ 72.821677][ T5351] vpanic+0x281/0x750 [ 72.823490][ T5351] ? __pfx_vpanic+0x10/0x10 [ 72.825525][ T5351] panic+0xb9/0xc0 [ 72.827214][ T5351] ? __pfx_panic+0x10/0x10 [ 72.829219][ T5351] ? __pfx__printk+0x10/0x10 [ 72.831445][ T5351] check_panic_on_warn+0x89/0xb0 [ 72.833741][ T5351] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 72.836531][ T5351] bch2_accounting_validate+0x112f/0x1400 [ 72.839044][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.841178][ T5351] ? _raw_spin_unlock_irqrestore+0x90/0x110 [ 72.843741][ T5351] ? __pfx_bch2_accounting_validate+0x10/0x10 [ 72.846434][ T5351] ? __page_table_check_zero+0xba/0x530 [ 72.848803][ T5351] ? __free_frozen_pages+0x65e/0xd30 [ 72.851228][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.853434][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.855587][ T5351] ? __pfx_bch2_accounting_validate+0x10/0x10 [ 72.858280][ T5351] bch2_bkey_val_validate+0x205/0x3e0 [ 72.860545][ T5351] ? __pfx_bch2_bkey_val_validate+0x10/0x10 [ 72.863167][ T5351] ? __asan_memset+0x22/0x50 [ 72.865319][ T5351] ? __bch2_bkey_unpack_key+0x98b/0xe10 [ 72.867738][ T5351] bch2_btree_node_read_done+0x4051/0x5550 [ 72.870139][ T5351] ? __pfx_bch2_btree_node_read_done+0x10/0x10 [ 72.872746][ T5351] ? lock_release+0x4b/0x3e0 [ 72.874752][ T5351] ? bch2_bkey_ptrs_to_text+0x1161/0x1310 [ 72.877290][ T5351] ? bch2_printbuf_make_room+0xdb/0x360 [ 72.879917][ T5351] ? enumerated_ref_put+0xbe/0x270 [ 72.882321][ T5351] btree_node_read_work+0x40e/0xe60 [ 72.884519][ T5351] ? __pfx_btree_node_read_work+0x10/0x10 [ 72.886821][ T5351] ? bch2_latency_acct+0x436/0x520 [ 72.888933][ T5351] ? __pfx_bch2_latency_acct+0x10/0x10 [ 72.891210][ T5351] ? bio_associate_blkg+0x6d/0x230 [ 72.893363][ T5351] bch2_btree_node_read+0x887/0x2a00 [ 72.895921][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.898334][ T5351] ? lock_release+0x4b/0x3e0 [ 72.900663][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.902881][ T5351] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 72.905230][ T5351] ? __pfx_bch2_btree_node_read+0x10/0x10 [ 72.907674][ T5351] ? bch2_trans_unlock+0x491/0x580 [ 72.909873][ T5351] bch2_btree_root_read+0x5f0/0x760 [ 72.912040][ T5351] ? __pfx_bch2_btree_root_read+0x10/0x10 [ 72.914356][ T5351] ? bch2_current_has_btree_trans+0x169/0x1a0 [ 72.916810][ T5351] read_btree_roots+0x2c6/0x840 [ 72.918839][ T5351] ? __pfx_read_btree_roots+0x10/0x10 [ 72.921102][ T5351] bch2_fs_recovery+0x261f/0x3a50 [ 72.923230][ T5351] ? __pfx_bch2_fs_recovery+0x10/0x10 [ 72.925686][ T5351] ? tick_nohz_tick_stopped+0x86/0xb0 [ 72.928054][ T5351] ? __irq_work_queue_local+0x1de/0x550 [ 72.930383][ T5351] ? __pfx___irq_work_queue_local+0x10/0x10 [ 72.932794][ T5351] ? __mutex_trylock_common+0x153/0x260 [ 72.935015][ T5351] ? __pfx___mutex_trylock_common+0x10/0x10 [ 72.937558][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.939957][ T5351] ? trace_contention_end+0x39/0x120 [ 72.942463][ T5351] ? bch2_fs_start+0x5e7/0xda0 [ 72.944606][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.946627][ T5351] ? bch2_fs_start+0x5e7/0xda0 [ 72.948634][ T5351] ? lock_release+0x4b/0x3e0 [ 72.950550][ T5351] ? bch2_recalc_capacity+0x8b/0x890 [ 72.952865][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.955135][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.957454][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.959788][ T5351] ? lock_release+0x4b/0x3e0 [ 72.962028][ T5351] ? bch2_recalc_capacity+0x8b/0x890 [ 72.964396][ T5351] ? up_write+0x1c4/0x420 [ 72.966243][ T5351] bch2_fs_start+0xaaf/0xda0 [ 72.968216][ T5351] ? bch2_fs_start+0x5e7/0xda0 [ 72.970235][ T5351] ? __pfx_bch2_fs_start+0x10/0x10 [ 72.972434][ T5351] ? sget+0x267/0x620 [ 72.974119][ T5351] bch2_fs_get_tree+0xb39/0x1520 [ 72.976239][ T5351] ? __pfx_bch2_fs_get_tree+0x10/0x10 [ 72.978515][ T5351] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 72.981329][ T5351] vfs_get_tree+0x92/0x2b0 [ 72.983704][ T5351] do_new_mount+0x2a2/0x9e0 [ 72.985768][ T5351] ? __pfx_do_new_mount+0x10/0x10 [ 72.987866][ T5351] ? path_mount+0x61c/0xfe0 [ 72.989694][ T5351] ? user_path_at+0x44/0x60 [ 72.991641][ T5351] __se_sys_mount+0x317/0x410 [ 72.993613][ T5351] ? __pfx___se_sys_mount+0x10/0x10 [ 72.995795][ T5351] ? rcu_is_watching+0x15/0xb0 [ 72.997746][ T5351] ? __x64_sys_mount+0x20/0xc0 [ 72.999716][ T5351] do_syscall_64+0xfa/0x3b0 [ 73.001602][ T5351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.004172][ T5351] ? clear_bhb_loop+0x60/0xb0 [ 73.006321][ T5351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.009116][ T5351] RIP: 0033:0x7fdd1b39038a [ 73.011254][ T5351] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.019387][ T5351] RSP: 002b:00007fdd1c1f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 73.023260][ T5351] RAX: ffffffffffffffda RBX: 00007fdd1c1f5ef0 RCX: 00007fdd1b39038a [ 73.026707][ T5351] RDX: 0000200000004900 RSI: 0000200000000140 RDI: 00007fdd1c1f5eb0 [ 73.030086][ T5351] RBP: 0000200000004900 R08: 00007fdd1c1f5ef0 R09: 0000000000200041 [ 73.033525][ T5351] R10: 0000000000200041 R11: 0000000000000246 R12: 0000200000000140 [ 73.036894][ T5351] R13: 00007fdd1c1f5eb0 R14: 0000000000004991 R15: 0000200000000040 [ 73.040503][ T5351] [ 73.042302][ T5351] Kernel Offset: disabled [ 73.044278][ T5351] Rebooting in 86400 seconds..